Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File: qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier: o+Ne0LrQMhsEFwwoBOq/ieEb3Gz/XtIan21JsV7oe58=
Subject key identifier: AA:76:68:EA:F3:09:EC:DC:FC:92:73:66:4A:6E:39:5D:43:69:71:68
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 019D98BD40662721BC920F03196F7A858214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number: 14AA
Signing time: Fri 17 Apr 2026 00:00:32 +0000
Manifest this update: Fri 17 Apr 2026 00:00:32 +0000
Manifest next update: Sat 18 Apr 2026 00:00:32 +0000
Files and hashes: 1: FNkHYRMJRFCiIlaK4G8JgEPS518.roa (hash: g2wnBjvuJyEP0SF26uwzawUig5FkEl7CQILghR3/QXg=)
2: _eAhrIruhIkJvgQ7XYhpOhkBn5Q.roa (hash: 4hxoG4bKraWNMIF1RfBWFI69iacKZ3rVBDrPXr2dCEQ=)
3: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: Ul6ri1MB84EcKsoYVbNALwD88ygokLg0znaFkpMjpfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:40:66:27:21:bc:92:0f:03:19:6f:7a:85:82:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Apr 17 00:00:32 2026 GMT
Not After : Apr 18 00:00:32 2026 GMT
Subject: CN=aa7668eaf309ecdcfc9273664a6e395d43697168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:bb:0a:c2:a7:df:ff:e7:20:8f:3f:22:25:
aa:92:9e:fb:87:98:ad:d6:60:8a:df:b6:b4:93:0f:
50:59:5a:00:a9:51:10:46:a7:aa:45:df:8e:56:55:
c9:d3:7b:7d:fe:e9:47:b3:55:43:d7:e8:b0:0a:91:
0b:31:69:d0:4d:63:ab:36:2e:d4:f9:f1:6c:b2:8a:
3f:6e:e1:46:9b:4a:2f:b9:43:a7:ba:06:18:70:e1:
99:84:eb:5b:71:05:9c:4a:19:82:36:27:ec:29:03:
de:c5:72:5e:9e:0b:01:fc:8f:ad:5a:a0:7a:0e:cc:
c4:0e:7f:d5:e1:96:22:74:24:76:a9:57:06:27:f5:
d5:12:56:69:c0:0c:b2:00:1b:f2:e9:34:b3:42:43:
68:2e:89:83:84:5f:c9:15:77:dc:2c:54:30:71:3d:
1c:69:f4:44:87:d3:1f:9b:6d:97:32:4d:53:4b:16:
40:bc:03:41:07:3f:6e:62:10:3b:13:ed:4d:ce:05:
b5:19:f8:64:c9:15:a7:11:d4:ec:7d:a4:c4:35:cd:
37:2f:fd:bb:1c:e2:1a:0b:2d:08:d9:2e:28:2d:1b:
5b:94:ce:e6:46:6b:a8:69:7e:b2:0c:e1:44:e2:fe:
a5:d5:48:89:62:87:de:57:11:5c:35:32:22:15:32:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:76:68:EA:F3:09:EC:DC:FC:92:73:66:4A:6E:39:5D:43:69:71:68
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c4:35:32:48:38:86:27:4c:d8:f0:2b:e5:12:f0:ae:ba:eb:
49:00:bd:d0:66:df:fc:8a:28:ed:18:5e:b4:7f:60:99:28:66:
7d:0d:0b:5c:79:aa:58:ac:ba:48:6b:b9:2e:d2:b9:8c:cf:03:
22:f7:f0:23:0e:49:66:e8:c8:e5:90:0b:e8:30:86:89:b9:91:
9e:4a:52:81:d5:00:10:b1:3c:6e:8d:c2:6c:42:ff:2b:2e:0a:
5b:7b:9b:4c:d4:5c:fb:1b:8a:6a:01:cd:a6:f5:93:c4:7b:d8:
60:04:fd:fa:65:c0:eb:90:0f:b1:79:75:57:f5:60:06:91:09:
0f:35:ad:75:69:36:13:e8:51:fc:32:73:88:2d:d3:9d:73:a0:
cc:bd:14:05:f4:be:ce:da:c1:d4:b0:0a:0d:94:c6:bc:90:d0:
b7:5a:09:06:87:59:d3:fb:fb:4e:43:85:67:b6:6d:d2:a2:2e:
fe:cf:ad:53:fa:fe:fe:3d:31:c2:b1:45:fc:c8:90:7c:d4:22:
88:df:fe:4c:9d:cc:b0:2e:6c:b2:31:76:37:11:33:a8:d7:e8:
0a:11:93:d2:57:6c:cc:50:6a:ee:08:2b:9a:70:c8:0d:17:2a:
30:a7:1c:ae:cf:e1:80:79:71:e1:13:9a:8f:69:b3:d9:3e:15:
b8:5e:6c:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvUBmJyG8kg8DGW96hYIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOWM5Yzk1YTU4YzM4MTFiZGE5NWRjODNjMmU0ODdhMjAw
YzRjMjUwHhcNMjYwNDE3MDAwMDMyWhcNMjYwNDE4MDAwMDMyWjAzMTEwLwYDVQQD
EyhhYTc2NjhlYWYzMDllY2RjZmM5MjczNjY0YTZlMzk1ZDQzNjk3MTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXS7CsKn3//nII8/IiWqkp77h5it
1mCK37a0kw9QWVoAqVEQRqeqRd+OVlXJ03t9/ulHs1VD1+iwCpELMWnQTWOrNi7U
+fFssoo/buFGm0ovuUOnugYYcOGZhOtbcQWcShmCNifsKQPexXJengsB/I+tWqB6
DszEDn/V4ZYidCR2qVcGJ/XVElZpwAyyABvy6TSzQkNoLomDhF/JFXfcLFQwcT0c
afREh9Mfm22XMk1TSxZAvANBBz9uYhA7E+1NzgW1GfhkyRWnEdTsfaTENc03L/27
HOIaCy0I2S4oLRtblM7mRmuoaX6yDOFE4v6l1UiJYofeVxFcNTIiFTJ02wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKp2aOrzCezc/JJzZkpuOV1DaXFoMB8GA1UdIwQY
MBaAFKqcnJWljDgRvaldyDwuSHogDEwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2Et
NDFhMDY3NmVkZDYxLzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2EtNDFhMDY3NmVkZDYx
LzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMQ1Mkg4
hidM2PAr5RLwrrrrSQC90Gbf/Ioo7RhetH9gmShmfQ0LXHmqWKy6SGu5LtK5jM8D
IvfwIw5JZujI5ZAL6DCGibmRnkpSgdUAELE8bo3CbEL/Ky4KW3ubTNRc+xuKagHN
pvWTxHvYYAT9+mXA65APsXl1V/VgBpEJDzWtdWk2E+hR/DJziC3TnXOgzL0UBfS+
ztrB1LAKDZTGvJDQt1oJBodZ0/v7TkOFZ7Zt0qIu/s+tU/r+/j0xwrFF/MiQfNQi
iN/+TJ3MsC5ssjF2NxEzqNfoChGT0ldszFBq7ggrmnDIDRcqMKccrs/hgHlx4ROa
j2mz2T4VuF5s6g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:26:11 2026 by rpki-client